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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1. (Currently Amended) A method of generating a password for use by an 
end-user device (UE) to access a remote server, comprising: 

sending a first request for access from the UE to the remote server; 

creating a temporary identity for the UE by said remote server; 

sending directly from said remote server to an authentication node in the UE's 
home network a second request for access, dotai l s of tho roauost for access, said 
second request d etails including said temporary identity for the UE and an identity of 
said remote server : 

at the authentication node or th e r e mot e s e rver , generating a Hypert e xt Tran s fer 
Protoco l (HTTP) Dig est challenge to said UE us i ng an algorithm oapabl e of generating 
e nd user password, said challenge including details of the temporary identity of the UE 
and said identity of said remote server; 

at the authentication node, generating a first password based on said temporary 
identity of the UE and said identity of said remote server: 

at the UE, generating a second password based on tho HTTP Dig e st cha l l e ng e , 
sa id p a ssword b ei ng assoc i at e d w i th the identity of the remote server and the temporary 
identity of the UE included in said received challenge ; 

storing the second password and the temporary identity of the UE at the UE; a&4 

sending an authentication response from said UE including sa i d t e mporary 
idontity and a proof of possession of the second password thereby establishing 
authentication between said UE and said remote serve r; and 

in response to said authentication response from said UE. the authentication 
node sending a reguest response back to the remote server, said response including 
the first password, allowing said remote server and said UE to challenge and 
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authenticate a subsequent access request directly without sending said second request 
from said remote server to said authentication node . 

2. (Currently Amended) The method in claim 1 , wherein th e algor i thm capab l e 
of g e nerating e nd u se r password s is HT I P said authentication node uses HTTP Digest 
Authentication and Key Agreement (AKA) for generating said first password . 

3-5. (Cancelled) 

6. (Currently Amended) The method in claim 1 c l a i m 5 , wherein the aJHTTP 
Digest challenge is generated at the authentication node and sent from the 
authentication node directly to the UE. 

7. (Cancelled) 

8. (Currently Amended) The method in claim 1 c l a i m 5 , further comprising 
authenticating the UE at the authentication node and redirecting the request for access 
from the authentication node to the remote server after the first password has been 
generated. 

9-12. (Cancelled) 

13. (Currently Amended) The method in claim 1 c l a i m 11 , further comprising 
including a HTTP Digest AKA challenge password in the information sent from the 
authentication node to the remote server and authenticating the UE at the remote 
server. 

14. (Currently Amended) The method in claim 1 c l aim 9 , further comprising 
authenticating the UE at the authentication node and returning an authentication result 
to the remote server. 
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15-17. (Cancelled) 

18. (Currently Amended) A method of authentication an end-user device (UE) 
with a remote server, comprising the steps of: 

receiving a first request for access from said UE by said remote server; 

creating the ^temporary identity for the UE by said remote server; 

sending directly from said remote server to an authentication node in the UE's 
home network a second request for access, dota i ls of the request for acooss, sa i d 
detafe - said second request including said temporary identity created by said remote 
server and an identity of said remote server and instructing said authentication node to 
generate a Hyportoxt Transfer Protoco l (HTTP) Digoct challenge to said UE, said 
challenge including said temporary identity of the UE and said identity of said remote 
server us i ng an al gor i thm capab le of g e n e r a ting e nd us e r password w i th said d e ta i ls ; 

at the UE, generating a password based on the HTIP D i gest challenge, said 
password being associated with the temporary identity of the UE created by said remote 
server; 

storing the password and the temporary identity of the UE at the UE; 

receiving at said remote server a first authentication response from said UE 
including said temporary identity and a proof of possession of the password thereby 
establishing authentication between said UE and said remote serve r and allowing said 
remote server and said UE to challenge and authenticate a subseguent access request 
directly without sending said second request from said remote server to said 
authentication node , 

19-22. (Cancelled) 

23. (Currently Amended) The method in claim 18, wherein the challenge 
generated by the authentication node is an HTTP Digest challenge is g e n e rated at th e 
auth e nt i cat i on nod e and s e nt from th e auth e ntication nod e dir e ct l y to th e UE . 
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24. (Previously Presented) The method in claim 23, wherein the password is 
stored at the authentication node. 

25. (Previously Presented) The method in claim 23, further comprising 
authenticating the UE at the authentication node and redirecting the request for access 
from the authentication node to the remote server after the password has been 
generated. 

26-29. (Cancelled) 

30. (Currently Amended) The method in claim 23 c l a i m 29 , further comprising 
including a HTTP Digest AKA challenge password in the information sent from the 
authentication node to the remote server and authenticating the UE at the remote 
server. 

31-33. (Cancelled) 



Page 5 of 9 



